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Europe needs a unified approach to 
COVID-19 digital contact-tracing 


The COVID-19 pandemic has put a great strain on European health systems and is 
having far-reaching effects on the economy. Digital technologies have proven to be vital 
in these testing times, both in combatting the virus itself and easing its negative impact 
on our daily lives. Internet-based technologies and services have been essential in 
maintaining dialogue and commercial activity, while public life has been restricted. They 
will also play an essential role in our exit strategy. 


DIGITALEUROPE strongly supports the development of digital contact-tracing solutions 
to help mitigate the spread of the virus and to allow the lifting of lockdown restrictions. 
They must be considered an essential part of the solution to getting the economy up 
and running again whilst keeping our citizens safe. 


COVID-19 does not respect national borders. We need solutions that work across our 
continent whilst protecting our citizens’ privacy. Europe must act as one. 


Whilst we welcome the initial guidance from the European Commission and the 
European Data Protection Board, this is only a first step. We therefore call on the 
European Commission and Member States to bring together the various approaches 
and drive forward a common vision that can get us out of this crisis quickly and safely. 


To get there, DIGITALEUROPE has outlined five key principles that a pan-European 
contact-tracing solution must adhere to: 


> Voluntary uptake 


= Itis important that EU Member States encourage their citizens to use these 
mobile applications but on an absolute voluntary basis without any kind of 
discrimination. The more citizens use contact-tracing mobile applications, the 
more effective they will become. However, citizens should have the final decision 
on whether they will use these mobile applications, must be in control of their 
data, and must be able to turn them off at any time. 


> Purpose limitation 
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= All solutions must clearly state the limited purpose of their data collection. 
Collected data should not be used for any other secondary processing. However, 
we would also like to highlight that for longer term efforts to contain the virus, 
such as vaccine research, increasing the scope of purposes of these solutions 
would be pivotal. 


> Privacy by design, and data & storage minimisation 


= |n adherence with one of the core principles of the GDPR, these solutions should 
be based on privacy by design and should not process more data than what is 
strictly required to function accurately and effectively. It should not be based on 
or require the collection of location data. 


>» Interoperability across Europe 


= Solutions should be interoperable and made available across all European 
countries. Political and technical approaches should enable cross-border 
freedom of movement of citizens and workers. 


>> Protect the identity of users 


= Solutions should utilise, where possible, anonymisation, pseudonymisation and 
aggregation techniques — such as temporary or rotating identifiers — to make it 
impossible to track or identify individual citizens. In addition, solutions should use 
state-of-the-art cryptography techniques to ensure further protection of users’ 
data. 


FOR MORE INFORMATION, PLEASE CONTACT: 


Chris Ruff 


Director for Communications and Political Outreach 


chris.ruff@digitaleurope.org / +32 485 55 22 54 


Martin Bell 


Policy Officer for Privacy and Cybersecurity 


martin.bell@digitaleurope.org +32 492 58 12 80 


About DIGITALEUROPE 
DIGITALEUROPE represents the digital technology industry in Europe. Our members include 
some of the world’s largest IT, telecoms and consumer electronics companies and national 
associations from every part of Europe. DIGITALEUROPE wants European businesses and 
citizens to benefit fully from digital technologies and for Europe to grow, attract and sustain the 
world’s best digital technology companies. DIGITALEUROPE ensures industry participation in 
the development and implementation of EU policies. 
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Corporate Members 


Accenture, Airbus, Amazon, AMD, Apple, Arçelik, Bayer, Bosch, Bose, Bristol-Myers Squibb, Brother, 
Canon, Cisco, DATEV, Dell, Dropbox, Epson, Ericsson, Facebook, Fujitsu, Google, Graphcore, Hewlett 
Packard Enterprise, Hitachi, HP Inc., HSBC, Huawei, Intel, Johnson & Johnson, JVC Kenwood Group, 
Konica Minolta, Kyocera, Lenovo, Lexmark, LG Electronics, MasterCard, METRO, Microsoft, Mitsubishi 
Electric Europe, Motorola Solutions, MSD Europe Inc., NEC, Nokia, Nvidia Ltd., Océ, Oki, Oracle, Palo Alto 
Networks, Panasonic Europe, Philips, Qualcomm, Red Hat, Rockwell Automation, Samsung, SAP, SAS, 
Schneider Electric, Sharp Electronics, Siemens, Siemens Healthineers, Sony, Swatch Group, Tata 
Consultancy Services, Technicolor, Texas Instruments, Toshiba, TP Vision, UnitedHealth Group, Visa, 


VMware, Xerox. 


National Trade Associations 


Austria: |OO 

Belarus: INFOPARK 
Belgium: AGORIA 
Croatia: Croatian 
Chamber of Economy 
Cyprus: CITEA 

Denmark: DI Digital, IT 
BRANCHEN, Dansk Erhverv 
Estonia: ITL 

Finland: TIF 

France: AFNUM, Syntec 
Numérique, Tech in France 


Germany: BITKOM, ZVEI 
Greece: SEPE 

Hungary: IVSZ 

Ireland: Technology Ireland 
Italy: Anitec-Assinform 
Lithuania: INFOBALT 
Luxembourg: APSI 
Netherlands: NLdigital, FIAR 
Norway: Abelia 

Poland: KIGEIT, PIIT, ZIPSEE 
Portugal: AGEFE 

Romania: ANIS, APDETIC 
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Slovakia: ITAS 

Slovenia: GZS 

Spain: AMETIC 

Sweden: Teknikféretagen, 
IT&Telekomféretagen 
Switzerland: SWICO 

Turkey: Digital Turkey Platform, 
ECID 

Ukraine: IT UKRAINE 

United Kingdom: techUK 


